Panda Software Antivirus Library ZOO Archive Heap Overflow Vulnerability
BID:15616
Info
Panda Software Antivirus Library ZOO Archive Heap Overflow Vulnerability
| Bugtraq ID: | 15616 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 29 2005 12:00AM |
| Updated: | Nov 29 2005 12:00AM |
| Credit: | Discovery is credited to Alex Wheeler. |
| Vulnerable: |
Panda WebAdmin Panda TruPrevent Personal 2006 Panda TruPrevent Personal 2005 Panda Titanium 2006 Antivirus + Antispyware Panda Titanium 2005 Antivirus Panda Titanium Panda Security 3.0 Panda Platinum 2006 Internet Security Panda Panda EnterpriSecure Antivirus Panda ISA Secure Panda GateDefender Panda FileSecure with TruPrevent Technologies Panda FileSecure Panda ExchangeSecure Panda EnterpriSecure with TruPrevent Technologies Panda ClientShield with TruPrevent Technologies Panda BusinesSecure Antivirus Panda Antivirus Platinum 2.0 Panda Antivirus for NetWare 2.0 Panda ActiveScan 5.0 |
| Not Vulnerable: | |
Discussion
Panda Software Antivirus Library ZOO Archive Heap Overflow Vulnerability
Panda Software Antivirus products are prone to a heap overflow vulnerability. This issue is exposed when the antivirus library attempts to decompress ZOO archive files.
Successful exploitation will result in execution of arbitrary code in the context of an affected application. The issue could affect desktop, gateway, and server antivirus applications on supported platforms. A number of third-party applications may also employ the affected library and could also be vulnerable. A conclusive list of affected products is not available at this time.
Panda Software Antivirus products are prone to a heap overflow vulnerability. This issue is exposed when the antivirus library attempts to decompress ZOO archive files.
Successful exploitation will result in execution of arbitrary code in the context of an affected application. The issue could affect desktop, gateway, and server antivirus applications on supported platforms. A number of third-party applications may also employ the affected library and could also be vulnerable. A conclusive list of affected products is not available at this time.
Exploit / POC
Panda Software Antivirus Library ZOO Archive Heap Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Panda Software Antivirus Library ZOO Archive Heap Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Panda Software Antivirus Library ZOO Archive Heap Overflow Vulnerability
References:
References: